PRIVACY & COOKIES

BAR BASCULE PRIVACY STATEMENT Last updated: 10 October 2026 1. Who are we and how can you reach us? This statement covers the website of Bar Bascule, Ruiterskwartier 93, Leeuwarden. For privacy questions or requests about your data, email info@barbascule.nl. Tell us which booking, report or photo you mean; do not send a copy of your ID unless asked. 2. VIP reservations and payments When you make a VIP booking, we ask for your name, email address, phone number, date, number of people, arrival time, package choice and an optional message. The system also stores your reservation code and booking, payment and arrival status. This is necessary to handle your request, payment and visit (performance of a contract or steps prior to entering into one). Required fields are needed to process a booking; an extra message is optional. Stripe handles payments and receives details including your email address and booking reference. The payment details you enter in Stripe are processed there; our reservation record contains a payment reference and status, not full card details. Payment requests run through Verdana's payment integration. Data needed to meet a legal record-keeping obligation is processed on that basis. 3. Lost property When you submit a report, we ask for your name, email, phone number, the lost item and a description. A photo and the date you lost it are optional. This allows the team to investigate your report and contact you: our legitimate interest in helping guests find their belongings. You can object to this processing. Your report is stored in our CMS and forwarded to Verdana Cloud (cloud.verdana.pro) for the Bar Bascule team. This includes your contact details, item, description and any photo or photo link. This information is not a public submission on the website. Wherever possible, upload only a photo of the item, without identifiable bystanders, identity documents, medical information or other unnecessary sensitive data. 4. Photos, team, DJs and Wall of Shame The website may feature photos, names, roles, captions and Instagram links relating to team members, DJs and visitors. A Wall of Shame submission contains an Instagram post link; an administrator reviews it before publication. A submission therefore does not automatically become public. Someone submitting a photo cannot give consent on behalf of everyone identifiable in it. Where required, consent to publish images of identifiable people must be arranged separately; a link on Instagram does not automatically make a photo free to use. Want a photo of yourself removed or to withdraw your consent? Email the page link and a description to info@barbascule.nl. We also assess requests from people who have not submitted anything themselves. Where consent is the legal basis, you can withdraw it without affecting earlier lawful processing. Where another legal basis applies, we assess your objection and the interests involved. 5. Contact and messages If you email us or contact us through an external service such as Instagram, we process the data in your message to reply. Depending on your enquiry, this is done for the purposes of a contract or based on our legitimate interest in answering questions. The service you use also processes data under its own statement. 6. Website, administration and technology Loading and securing the website may involve hosting and infrastructure services processing technical data such as your IP address, browser type, requested page and error information. The website selects a language based on your saved choice, a country indicator from the request or your browser language; it does not request your GPS location. This processing supports the operation and security of the website. Administrators use an account with an email address, profile details, role and login details. Sessions and locally saved editing drafts enable login and site management. These administrative features are not intended for ordinary visitors. Automatic translation processes published website text through a translation service. 7. Cookies and local storage — cookies, not shots Necessary and functional storage keeps the site working. Your language choice is stored in the bb_lang cookie (for a maximum of one year). Your cookie choice is stored in local browser storage under bb_cookie_choice, until you change it, clear your browser storage or an updated version asks you to choose again. Administrators also use session storage and locally saved editing drafts. We do not ask for consent where this storage is necessary for the requested function. Google Maps and Instagram are optional. Without consent, their embedded map and posts do not load. You can allow them separately, accept everything or choose necessary storage only. Once you have consented, these external services may process your IP address, browser data and interactions and use their own cookies; their own statements explain durations and further processing. A standard external link only opens that service when you click it. A requested Stripe payment loads the payment environment needed to pay for your order. Stripe explains its cookies and data processing in its own policy. No separate advertising pixel or visitor analytics is configured in the current site code. Fonts are served locally and are not loaded through Google Fonts. This says nothing about cookies used by external services after you have allowed them. You can change your choice or withdraw consent at any time via Cookie settings at the bottom of the site or on this page. Withdrawing consent stops optional elements from loading; you can remove cookies already placed by external services through your browser. You do not have to choose again on every page. If you clear your browser storage or use a different browser or device, the choice will appear again. And no: accepting does not get you a free shot. 8. Who is data shared with? Our authorised Bar Bascule team uses data to handle bookings and reports. Verdana Cloud provides website data, login and storage services; hosting and integration services support the site's operation. Stripe processes payments. Verdana receives lost property reports in Verdana Cloud. Google Maps and Meta/Instagram receive browser data only when you allow their embedded elements or visit their external websites yourself. Public authorities may receive data where a legal obligation requires this. Services may be independently responsible for their own processing. You can find their current privacy information at stripe.com/privacy, policies.google.com/privacy and privacycenter.instagram.com. 9. Retention and deletion Not all data has the same retention period. The current website administration has no general automatic deletion period for reservations, lost property reports, associated photos or Wall of Shame submissions. Reports and Wall of Shame submissions can be deleted manually by administrators. The expiry of a temporary photo link does not delete the stored file. Forwarded reports and photos may also be held by Verdana; deleting them in one place does not automatically mean they are deleted in the other. Specific retention periods for these categories, technical logs and copies held by suppliers have not yet been set out in this statement. For information about a specific piece of data or to request deletion: info@barbascule.nl. An applicable legal retention obligation may restrict deletion. We do not publish a made-up retention period or promise that data will disappear automatically. 10. Processing outside the European Economic Area International services such as Stripe, Google, Meta and Verdana may process data outside the EEA. The exact processing countries and applicable legal basis for transfers relating to this website have not yet been confirmed in this statement. Their privacy information describes their international processing. Ask for information about the safeguards for your data via info@barbascule.nl; no specific certification or transfer guarantee is claimed here. 11. Your rights You can request access, correction, deletion, restriction of processing and, where applicable, a portable copy of your data. You can object to processing based on legitimate interests and withdraw consent where processing relies on it. These rights are subject to legal conditions and exceptions. Email your request to info@barbascule.nl. We may ask for limited additional information to verify your identity. Under the GDPR, a request must generally be handled within one month; for complex or multiple requests, this period may be extended under certain conditions, with an explanation provided within the first month. You can lodge a complaint with the Dutch Data Protection Authority via autoriteitpersoonsgegevens.nl. Booking confirmation follows a payment status and availability check; there is no indication on the current website of profiling or a solely automated assessment with comparable legal effects. Your cookie choice does not constitute consent to all the data processing described above. 12. Changes and scope We update this statement when the website or its processing changes. This text describes the website and its linked forms; any CCTV in the bar is not automatically covered by this website statement. The retention periods and international arrangements mentioned above as still awaiting confirmation must be checked by Bar Bascule with its suppliers. This statement is not a certification or guarantee of full legal compliance.